Dynamic Effects Increasing Network Vulnerability to Cascading Failures 
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We study cascading failures in networks using a dynamical flow model based on simple conserva- 
tion and distribution laws to investigate the impact of transient dynamics caused by the rebalancing 
of loads after an initial network failure (triggering event). It is found that considering the flow dy- 
namics may imply reduced network robustness compared to previous static overload failure models. 
This is due to the transient oscillations or overshooting in the loads, when the flow dynamics adjusts 
to the new (remaining) network structure. We obtain upper and lower limits to network robustness, 
and it is shown that two time scales r and To, defined by the network dynamics, are important 
to consider prior to accurately addressing network robustness or vulnerability. The robustness of 
networks showing cascading failures is generally determined by a complex interplay between the 
network topology and flow dynamics, where the ratio \ = T / T o determines the relative role of the 
two of them. 

PACS numbers: 89.75.-k; 89.20.-a; 75.40.Gb; 89.65.-s 



Societies rely on the stable operation and high perfor- 
mance of complex infrastructure networks, which are crit- 
ical for their optimal functioning. Examples are electri- 
cal power grids, telecommunication networks, water, gas 
and oil distribution pipelines, or road, railway and airline 
transportation networks. Their failure can have serious 
economic and social consequences, as various large-scale 
blackouts and other incidents all over the world have 
recently shown. It is therefore a key question how to 
better protect such critical systems against failures and 
random or deliberate attacks [J, 0, El- Issues of net- 
work robustness and vulnerability have not only been 
addressed by engineers [4|, LSfl , but also by the physics 



community 

In the initial studies of this kind 
mary concern was dedicated to what can be termed struc- 
tural robustness] the study of different classes of network 
topologies and how they were affected by the removal of 
a finite number of links and/or nodes (e.g. how the av- 
erage network diameter changed) . It was concluded that 
the more heterogeneous a network is in terms of, e.g., 
degree distribution, the more robust it is to random fail- 
ures, while, at the same time, it appears more vulnerable 
to deliberate attacks on highly connected nodes @, EH ■ 

Later on, the concepts of network loads, capacities, and 
overload failures were introduced [^, 03, EH, EH, EH, Ell • 
For networks supporting the flow of a physical quantity, 
the removal of a node/link will cause the flow to redis- 
tribute with the risk that some other nodes/links may be 
overloaded and failure prone. Hence a triggering event 
can cause a whole sequence of failures due to overload, 
and may even threaten the global stability of the net- 
work. Such behavior has been termed cascading fail- 
ures. A seminal work in this respect is the paper by 
Motter and Lai 9J. These authors defined the load of 
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a node by its betweenness centrality 0, [§| . Subsequent 
studies introduced alternative measures for the network 
loads 1 121 as well as more realistic redistribution mecha- 
nisms iH El El, EH • 

In all studies cited above, the redistribution of loads 
is treated time-independent or static. We will refer to 
them collectively as static overload failure models. The 
load redistributions in such models are instantaneously 
and discontinuously switched to the stationary loads of 
the new (perturbed) network, i. e. the transient dynam- 
ical adjustment towards the new stationary loads of the 
perturbed network is neglected. 

The aim of this Letter is to compare robustness es- 
timates of complex networks against cascading failures 
where the dynamical flow properties are taken into ac- 
count relative to those where they are not (static case). 
This work does not intend to target a specific system 
(or network); instead we aim at being as generic as pos- 
sible in the choice of dynamical model with the conse- 
quence that particular details and features of a specific 
system have to be neglected, i.e. we work with a minimal 
model as often favored in physics. Nevertheless, the con- 
ceptually simple dynamical phcnomcnological flow model 
that we propose, incorporates flow conservation, network 
topology, as well as load redistribution features that are 
shared by real-life systems. On this background, it is 
expected (c/. Fig. [T]) that the model results will reflect 
some important properties of real-life systems. 

For matters of illustration and to facilitate compari- 
son with previous results we have 
worked with topologies of power transmission networks. 
Although our model seems to capture stylized features of 
electrical networks (see Fig. QJ, we stress that our goal is 
not a realistic representation of those, nor is our model re- 
stricted to such systems. Within the proposed model, we 
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be defined via Lij(t) = Cij(t) + Cji(t) [28 
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FIG. 1: (Color online) Comparison of the time-dependent 
link loads after an triggering event (taking place at t = 0) as 
predicted by state-of-the-art power simulators (Figs. QJa) EH 
and (b) [Hj]), and the simple "flow-conserving" model de- 
scribed and used in the present work (Figs. [TJc) and (d)). 



want to demonstrate that time-dependent adjustments 
can play a crucial role. In particularly, we will show that 
static overload failure models give the lower limit of the 
vulnerability of flow networks to failures and attacks, and 
hence of the probability of cascading failures. 

In order to study this, in the very tradition of physics, 
we use a simple flow model with few parameters, which 
however considers the network topology, flow conserva- 
tion, and the distribution of loads over the neighboring 
links of a node 

mm- we assume a network consist- 



ing of Af nodes and represent it by a matrix W, whose 
entries Wij > (with i,j = 1,2,..., Af) shall reflect 
the weight of the (directed) link from node j to i (with 
Wij = indicating no link present). The relative weights 
Tij = Wij j Wi shall define the elements of the transfer ma- 
trix T, where Wj = Y^iLi W%j is the total outgoing weight 
of node j 22j . These elements describe the distribution 



of the overall flow (per unit weight) Cj(t) reaching node 
j at time t over the neighboring links i. When the flow 
is assumed to reach the neighboring nodes i at time step 
t + 1 , we obtain a (t + 1 ) = flf=i T« Cj (*) +jf US E3, Hj, 
where we have added possible source terms (j i > 0) or 
sink terms (jf < 0). In vectorial notation, the network 
flow equation reads 



c(t + 1) = Tc{t) + j 



(1) 



resembling Kirchhoff's first law from circuit theory 

If j ± = 0, the stationary solution to Eq. fl} is a con- 
stant vector with components cf\oo) ~ 1/y/Af, while 
with a source term present (j -± ^ 0), it can be expressed 
as c(oo) = c<°)(oo) + (1 - T) + j ± withfl - T) + denot- 
ing the so-called generalized inverse [2J| of the singu- 
lar matrix I T. Hence, the total directed current on 



link j 



at time t becomes Cij(t) — WijCj(t), from 



form expressions for the flow dynamics at single nodes 
have been derived in Ref. [23|]. These allow one to study 
the wave-like spreading and dissipation of perturbations 
in the network while propagating via neighboring links, 
second-next, etc. (see Fig. [5]). Such perturbations may 
result from the redistribution of flows after the failure of 
an overloaded link. 

In the seminal work of Motter and Lai Q , failure of a 
node was based on the long-term overload, i.e. a node 
was assumed to fail whenever the stationary load in the 
perturbed network (considering previously broken nodes) 
exceeded the node capacity. The (node) capacities were 
defined as 1 + a times the (stationary) loads of the orig- 
inal network with a > being a global tolerance factor 
(i.e. a relative excess capacity or safety margin). In other 
words, the evaluation of overloading was previously done 
after the system relaxed, without considering the time- 
history of how it g ot to this state (static overload failure 
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yj, liJ,li6i . 

In this Letter, we generalize this approach towards a 
dynamical overload failure model. Specifically, in our 
computer simulations we assumed a link from node j 
to i to be overloaded (and to fail) whenever the time- 
dependent load Lij (t) exceeded the link capacity dj for 
at least a time period r, the overload exposure time. The 
link capacities were defined analogously to Motter and 
Lai @ as 



Cij = (1 



J '.i • 



(2) 



which also the (undirected) load (t) of this link can 



where Lij denote the stationary loads of the original net- 
work. 

In the following, we study the transient dynamical ef- 
fects and overload situations that may occur before the 
stationary state is reached. While for t = 0, a failure 
results immediately after a first-time overload, r > 
implies that the system will have to be overloaded for a 
certain time period in order to cause a failure. The static 
overload failure model corresponds tor^oo,or in prac- 
tice, t ^> To, where tq denotes the transient time of the 
system (the inverse of the smallest non-zero eigenvalue of 
T). Therefore, the ratio x = T / T o can t> e used to inter- 
polate between the static (x — > oo) and (instantaneous) 
dynamical overload failure (x = 0) models. While the 
static overload failure model describes the upper limit of 
network robustness (the best case), the dynamic overload 
failure model with r = gives the lower limit (the worst 
case) due to an overshooting flow dynamics (Fig. [5]). Re- 
alistic cases are expected to lie between these two limiting 
cases, corresponding to a finite value of x- 

Apart from network robustness to overload failures, 
the value of x a ^ so determines the dynamics of failure 
cascades. In the dynamic case with x = 0, close-by links 
are more likely to be overloaded and to fail than in the 
static case (x — * oo). Therefore, in the dynamic scenario 
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already studied by Motter and Lai [9( — the Northwest- 
ern American power transmission network obtained from 
Ref. [261 (see also Refs. 11, 271). To evaluate the effect of 
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FIG. 2: (Color online) (a) Illustration of the dynamics of 
our network flow model assuming the topology of the UK 
high-voltage power transmission grid (300-400 kV) consist- 
ing of 120 geographically correctly placed nodes (generators, 
utilities, and transmission stations) and 165 links (transmis- 
sion lines). The network was treated as unweighted and 
undirected. In our simulations, twenty of the existing net- 
work nodes were chosen randomly to play the role of gener- 
ator (source) and utility (sink) nodes (In^ /A/1 = 2.5 ■ 10~ 4 ), 
ten of each kind. In Fig. [2Ja) the location of these nodes 
are indicated by filled red squares and filled green diamonds 
respectively. At time t = 0, before which the network loads 
were in the stationary state (Lij(t < 0)), the network was 
perturbed by removing a transmission line in Scotland (the 
red dashed link marked by in Fig^a)). The resulting nor- 
malized transient link loads, Lij(t)/Lij(t < 0), are depicted 
in Figs. EJb) and (c) for some selected links of the UK trans- 
mission grid, as indicated in Fig. [2ja) . The horizontal dash- 
dotted lines correspond to the normalized stationary loads of 
the links. 



one tends to have a pronounced "failure wave" sweeping 
over the network. 

In order to further illustrate the difference between the 
static and dynamic cascading failure models, as well as 
getting a quantitative measure of the level of overesti- 
mation of robustness, we investigate one of the networks 



an initial network perturbation and the following cascade 
(if any), we study the fraction of nodes and links, Gat (a) 
and Gl{o), respectively, remaining in the giant compo- 
nent of the network after potential cascading failures have 
ceased, which have been initiated by the random failure 
of a link [j| . Both quantities behave similarly [29| . They 
are displayed in Fig. [3] for the US power transmission net- 
work as functions of the tolerance parameter a. It has 
been checked and found that our static overload failure 
model well reproduces the general behavior previously 
reported in Ref. [§]. Namely, global cascading failure 
will occur under random attacks (or failures) mainly for 
heterogeneous networks. 

According to Fig. [3j there is a pronounced difference 
between the static and (instantaneous) dynamic overload 
failure model, corresponding to upper and lower esti- 
mates to the network robustness. As is shown in the 
inset to Fig. O it can be as significant as 80%, and for 
more homogeneous link weights we have found differences 
even higher than 95%. Only for quite significant toler- 
ance factors (a > 50%), the discrepancy between the 
two estimates becomes insignificant. Moreover, it has 
also been found that the static model tends to be more 
sensitive to the location of sources (and sinks). Thus, 
our results show that the role of the dynamical process 
taking place on the network can be important when esti- 
mating the robustness of networks to failures and random 
attacks. It is not only the topology of the network that 
matters, but also the properties of the network dynamics 
as measured by \ — T / T o- The change in one or both of 
them will require a new robustness estimate. 

In conclusion, we have simulated a simple network 
flow model considering, besides network topology, a flow- 
conserving dynamics and distribution of loads. Within 
this framework, we have studied the role of the tran- 
sient dynamics of the redistribution of loads towards the 
steady state after the failure of network links. This tran- 
sient dynamics is often characterized by ovcrshootings 
and/or oscillations in the loads, which may result in char- 
acteristic "failure waves" spreading over the network. We 
have furthermore found that, considering only the loads 
in the steady state (the static overload model), gives a 
best case estimate (upper limit) of the robustness. The 
worst case (lower limit) of robustness can be determined 
by the instantaneous dynamic overload failure model and 
may differ considerably. 

Our simple dynamical approach provides additional in- 
sights into systems in which network topology is com- 
bined with flow, conservation and distribution laws. 
These are potentially useful to understand, better de- 
sign and protect critical infrastructures against failures. 
For instance, overloads related to high electrical currents 
cause (through over-heating of wires) a slow spreading 
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FIG. 3: (Color online) The robustness of the Northwestern US 
power transmission grid [2g], consisting of 4941 nodes, with 
an average node degree of 2.67 (cf. also Refs. [ll]> EE E3). 
The average fraction of links (or nodes), G(a), remaining in 
the giant component of this network (after cascading) is de- 
picted as function of the tolerance parameter a, using the 
static and dynamic overload failure models described in the 
text. To obtain these results, the links were assigned weights, 
drawn from a uniform distribution on the interval [1, 10], and 
200 generator and utility nodes of strength |n^/7V| = 10~ 8 
were assigned randomly (100 of each type). The results were 
obtained by averaging over all possible triggering events (sin- 
gle link removals). The inset shows the difference, AG(a), 
between the static and dynamic overload failure models. 



of failures as compared to the adjustment dynamics of 
the currents. This corresponds to x > 1- In contrast, 
within the validity limits of Ohm's law, one may also use 
our model to mimic effects of overloads related to over- 
voltages. In this case, we have x 1; an d un k failures 
reflect the anticipatory disconnection of lines to prevent 
damages of the network and its components. Other ex- 
amples, besides electrical power grids, are traffic systems, 
where overloaded streets cause unreasonably long travel 
times along links, which may be interpreted as effective 
link failures. The resulting choice of alternative routes 
corresponds to a rebalancing of loads and is expected to 
cause transient effects, with finite values of x- 

As the model allows for effective simulations, it could 
also be useful for close to real-time planning and opti- 
mization of network topologies and load sharing, partic- 
ularly for large networks. Fully realistic state-of-the-art 
simulation tools for, say, electrical power grids that in- 
clude network capacities, inductors, power generation, 
etc., are computationally expensive and therefore not so 
well suited for real-time simulation of large networks or 
their topological optimization. Hence, simpler models 
could quickly and efficiently give a useful overview that 
could serve as the starting point for more detailed off-line 
simulations using classical power network simulators. 
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